We are tickled pink to announce the release of: puppet-swift 9.4.4: Puppet module for OpenStack Swift This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/puppet-swift/ For more details, please see below. 9.4.4 ^^^^^ Security Issues * Updated file permissions for CVE-2016-9590. Fixes configuration file permissions for the proxy server and storage servers. The permissions were getting incorrectly changed from 0640 to 0644 due to lack of the explict setting of mode on the concat resources. Changes in puppet-swift 9.4.3..9.4.4 ------------------------------------ f75979a puppet-swift 9.4.4 b7c6ecb Release note for CVE-2016-9590 fff73b5 [CVE-2016-9590] Correct configuration file perms 04d4bf6 set url_base option in staticweb swift middleware Diffstat (except docs and test files) ------------------------------------- manifests/proxy.pp | 1 + manifests/proxy/staticweb.pp | 10 +++++++++- manifests/storage/server.pp | 1 + metadata.json | 2 +- releasenotes/notes/cve-2016-9590-b493949d7df27489.yaml | 7 +++++++ releasenotes/source/conf.py | 4 ++-- spec/classes/swift_proxy_spec.rb | 1 + spec/classes/swift_proxy_staticweb_spec.rb | 9 +++++++++ spec/defines/swift_storage_server_spec.rb | 2 +- templates/proxy/staticweb.conf.erb | 3 +++ 10 files changed, 35 insertions(+), 5 deletions(-)